Skip to content
Polygon Fixes Critical Security Flaws in Recent Hard Forks

Polygon Fixes Critical Security Flaws in Recent Hard Forks

First seen 30 Aug 2026, 02:18 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •August 30, 2026 at 23:47 UTC
  • •Polygon fixed critical vulnerabilities in Bor and Heimdall clients through hard forks.
  • •No exploitation of the vulnerabilities was detected on the mainnet.
  • •Validators must upgrade to specific versions to remain part of the network.

Polygon Labs disclosed multiple security vulnerabilities affecting its proof-of-stake network, which were fixed in the Austin and Kyoto hard forks activated on August 29, 2026. The vulnerabilities involved the Bor and Heimdall clients, with risks including denial-of-service attacks and validator resource exhaustion. The most critical issue was in the Heimdall client, where specially crafted transactions could disrupt network operations. Polygon confirmed that no exploitation of these vulnerabilities occurred on the mainnet. The fixes were implemented before public disclosure to ensure network integrity. Validators and node operators are required to upgrade to Bor v2.10.0 and Heimdall v0.11.0 to maintain consensus. The upgrades were validated on the Amoy testnet prior to mainnet deployment.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 46d ago How this analysis works

Timeline

2026-08-29
Austin and Kyoto hard forks activated
Polygon implemented fixes for security vulnerabilities in Bor and Heimdall clients, enhancing network stability.
Kucoin
2026-08-30
Polygon discloses vulnerabilities
Polygon publicly disclosed the vulnerabilities after ensuring no exploitation occurred on the mainnet.
En.Bloomingbit

More articles in this cluster (8)

Following this threat?

Track Polygon in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 3